[Eset]Dorifel/Quervar: the support scammer?s secret weapon

[igor51]

Dorifel/Quervar: the support scammer?s secret weapon

The malware that some people are calling Dorifel or XDocCrypt (ESET detects it as Win32/Quervar.C and has a cleaner for it here) is having enormous impact right now, mostly in the Netherlands. It has some very interesting characteristics – it infects documents (and true executables) by appending them RC4-encrypted to the body of a new ... Read More...
Source: Dorifel/Quervar: the support scammer?s secret weapon